Archived topic
Inline coding
1 reply · Started by Jarko on February 18, 2020
I am securing my site with CSP and wondering if your theme & plugin is using inline scripting?
If so would it possible to remove it in future releases to make more CSP compatible?
(Its no recommended to use unsafe-inline with CSP)
Why to avoid inline Javascript?
*It's not recommended to inline your javascript since you can't cache them.
*Maintainability!
* Optimization and minification
* Cross Site Scripting (XSS)
Thank you
Hi there,
Some of our CSS and JS is within the <head> section of your site, or above the closing </body> (for javascript).
We don't do any inline CSS/JS within the actual HTML elements.
If you want to make sure everything is served in a separate file, I suggest using a plugin like Autoptimize.
Let me know if you need more info :)